logo
Is that QR code actually a scam? Here's what to know about 'quishing' before you scan

Is that QR code actually a scam? Here's what to know about 'quishing' before you scan

Yahoo18-07-2025
If it seems like QR codes are everywhere these days, that's because, well, they are.
Thanks to a surge in popularity during the COVID-19 pandemic, these scannable codes are being used by businesses and brands for everything from payments and registrations to advertising and information.
You'll see them in restaurants in place of paper menus, on product packaging, on signposts, on parking meters — and even on trees.
But with success comes cybercrime — or in this case, QR code "quishing" (think phishing ... with a q).
Just this week, the agency in charge of Montreal's parking meters warned of potentially fraudulent QR codes posted on its signs that might direct people to malicious websites. Last year, a similar warning was issued in Ottawa, and officials warned people who may have scanned them to check their credit card information.
As cases of QR code fraud are starting to pop up, and with some officials warning consumers to take pause, you may be wondering if it's ever safe to scan those familiar little black and white squares and follow the link.
With that in mind, here's what you need to know about QR code scams and how to avoid them.
What are QR codes?
QR codes, or quick response codes, are a type of bar code that's scannable by digital devices like smartphones through their camera lens. They typically contain information, such as a link to a website.
One of the most popular uses is for payment, where the market is expected to reach $35.07 billion US globally by 2030, with a 16.1 per cent compound annual growth rate, according to a 2024 report by Allied Market Research.
But just as the report predicted "massive adoption" of QR codes for payment, it noted that "rising data breaches and security issues limit the growth."
How do the scams work?
It's called "quishing," and experts have warned it can be highly effective when the codes are posted in credible places.
"QR code usage is so commonplace, and many users just scan them and hardly pay attention to where they're going," said Tom Arnold, a cybersecurity expert who lectures on digital forensics and incident response at San Jose State University and the University of Nevada, Las Vegas.
QR codes can be stuck on public signs, defaced websites, phishing emails, text messages and even placed into photo images, Arnold, who is also a digital forensics investigator, told CBC News.
They're a "great way" for attackers to hide the URL or location they're sending people to, Arnold said.
Fraudsters claiming to be a service provider, government agency or financial institution use QR codes in various scams to steal personal information, money or both, the Canadian Anti-Fraud Centre (CAFC) explained in an email.
"Similar to fraudulent links or URLs, QR codes can be inserted into emails and texts to direct potential victims to fraudulent or malicious websites," a CAFC spokesperson said.
WATCH | Fake QR codes are popping up on Montreal parking meters:
Have there been many cases?
In 2023, the U.S. Federal Trade Commission warned consumers that scammers are hiding harmful links in QR codes to steal personal information, using everything from parking meters to text messages.
Last year, the Canadian Centre for Cyber Security, part of Communications Security Establishment Canada, issued a similar warning in a publication on security considerations for QR codes, saying there's a potential for "threat actors to leverage QR codes to infect devices with malware, steal personal information, or conduct phishing scams."
The Canadian Banking Association also warns about potential QR code scams.
That said, there haven't been a lot of cases in Canada, although experts say that could change. The CAFC said it's had just 10 reports related to QR code phishing since 2024.
CBC News has previously reported on two recent incidents: the parking meters with fraudulent QR codes in Montreal and Ottawa.
And last August, the RCMP in Red Deer, Alta., warned residents of QR code scams, saying in a news release it discovered some recent cases of QR codes that, when scanned, bring the user "to a website that contains malware. This malware can obtain your banking information and other sensitive information."
In one case, someone had received a package of luxury goods that they had not ordered, the RCMP said, and when they opened the package, there was an attached note directing them to scan the QR code.
Could it get worse?
Kwasi Boakye-Boateng, deputy director of research and training with the Cyber Attribution Data Centre, located at the University of New Brunswick's Canadian Institute for Cybersecurity, said he thinks QR code scams are poised to become a major problem.
"I wouldn't be surprised if it's something that's catching on now. It's because no one is paying attention to it. And usually attackers would always find the easiest means to acquire any information that would give them a financial advantage," Boakye-Boateng said in an interview.
It's also become easy for people to design apps, tools and websites that look legitimate, especially using artificial intelligence, he said.
And if the scammer is well resourced, it may not even be possible to trace it back to them, Boakye-Boateng said. "They can cover their tracks."
LISTEN | Could that QR code menu be a scam?:
What are the warning signs?
Experts say you should carefully check the URL of where the QR code is directing you, since that can indicate whether it's a potential scam. Hovering over the code with your camera without actually clicking will usually show you the link, the CAFC said.
For instance, Arnold said, the URL for a fraudulent QR code that looks like it's sending you to TD Bank might look like this: tdbank.com/?login%20%20%20%20%20%20%20%20%20mybadsite.com/TDlogin.
Adding a bunch of %20s allows the attacker to hide the fact they're actually sending you to mybadsite.com, he explained.
Any enticement that uses a sense of urgency is an immediate red flag, Arnold said, such as a QR code to buy last-minute tickets for a concert. In general, any unsolicited message of any type that prompts a user to scan a code should be considered a risk, he said, and lone QR codes that are just stuck on a wall or light post should never be scanned.
Some scammers will place stickers over legitimate QR codes in public spaces, like on parking meters and posters. As a safe practice, try scratching the code or scraping your fingernail over it to see if it might have been pasted on, Boakye-Boateng said.
If you think you've fallen victim to a scam, call the police, he said. "You have to be very diligent now."
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

Digby affordable housing project on hold as federal funding dries up
Digby affordable housing project on hold as federal funding dries up

Yahoo

timean hour ago

  • Yahoo

Digby affordable housing project on hold as federal funding dries up

A plan by a Digby, N.S., non-profit to build affordable housing on the site of a former downtown motel is at a standstill as the group awaits word on federal funding. The Digby & Area Housing Coalition Society purchased the former Siesta Motel in 2022 with an aim to turn the existing building into affordable housing, coalition chair Nancy Robinson said. Subsequently, it was decided that it would be more cost efficient to demolish the motel and build 34 units on the site. The units would serve seniors and other vulnerable people facing Digby's severe housing shortage. Robinson said the units would be genuinely affordable, with tenants spending no more than 30 per cent of their income on rent, including utilities. She said they already have many applicants for the units. After securing $300,000 in funding including provincial grants for design work and municipal approvals, the $11.2-million project was construction-ready this spring and awaiting the release of federal funds. After waiting for the outcome of the federal election, Robinson said the group was told the Canada Mortgage and Housing Corporation's affordable housing fund, their expected funding source, had been depleted. 'That's a lot of money' CMHC said in an email to CBC that it's affordable housing fund "has attracted significant interest and success, resulting in numerous high-quality applications," but did not indicate if and when it will be replenished. Robinson said the devastating news has left the project in limbo. "That's a lot of money and it's very difficult to make that up," she said. "It's nerve-racking, not just because of the number of people that are waiting for housing, desperately waiting for housing, and Digby where there's really basically nothing available and certainly nothing affordable." Robinson said the delay leaves the volunteer organization having to cover significant costs, including the $2,600-monthly mortgage payment on the vacant property. The delay couldn't come at worse time for Digby, she said. The community's housing shortage has reached emergency levels. She said the funding issue appears linked to broader changes in federal housing policy. While Ottawa works to implement its new housing plan, she said existing programs like the affordable housing fund have been allowed to lapse. Robinson said she understands the need for systemic reform, but immediate action is needed to help people in desperate need of appropriate housing. The coalition has launched a local fundraising campaign and is exploring alternative financing options. Chris D'Entremont, the Conservative MP for Acadie-Annapolis, which includes Digby, said it was strange the program was still taking applications even though it said its funds have been depleted. He said billions of dollars have gone into the fund, which has existed since 2018. "We're hoping that as the fall rolls around, of course, there's going to be a budget coming," he told CBC Radio's Information Morning Nova Scotia. Finance Minister François-Philippe Champagne "has said that there will be a program coming, that there should be funding. So we're hoping it will be topping this off." With demolition delayed from its planned May 2025 start, Robinson said completion could now slip to late 2026. Meanwhile, for the applicants the wait continues with no clear resolution in sight. "They are desperate. It's palpable. It's tragic, really," Robinson said. MORE TOP STORIES

Whole new neighbourhood proposed for Rothesay, with 1,277 housing units
Whole new neighbourhood proposed for Rothesay, with 1,277 housing units

Yahoo

timean hour ago

  • Yahoo

Whole new neighbourhood proposed for Rothesay, with 1,277 housing units

Ali Kamkar moved to New Brunswick six years ago to have a more relaxing life and focus on raising kids after leading a busy life running manufacturing and property development businesses in the Middle East. He and his wife settled in Rothesay and began to put down roots, with his daughter enrolling at Rothesay Netherwood School. Another daughter was born a year after they arrived. Kamkar soon became restless because of his entrepreneurial nature. "Business is in my blood," he said. "After six months, I needed to go back to work. I start to look around for opportunities. I thought, how can I do something positive for our community? How can I bring something that the community needs?" With a business partner from B.C., he opened a self-storage operation in Millidgeville with 440 units and began looking around for housing development opportunities. In Rothesay, he saw the need for a better mix of housing and has submitted a proposal for a mixed-use development that would add nearly 1,277 units over a 20-year period in a commercial and residential area near the highway. The town now has about 12,000 residents, so the development could provide a significant boost to the population and housing availability over time. Kamkar said the community has mainly single-family homes, which is great for young families but not for seniors or younger people. "Many people born here, raised here, they love to be here, but they are older," he said. "They want to move somewhere smaller. They want to stay close to friends and family, but they don't want to take care of the grass and shovel the snow. They want to be in the community, but there is nothing available in the community. "There are also young people that want to have their own place but not much is available or affordable." 'Times are changing in the region' Mayor Nancy Grant said Kamkar's proposal reflects the changing character of the community. "Rothesay has traditionally been a community of single-family homes, but times are changing in the region," Grant said. "We're trying to increase the population. There's a housing shortage, and there's a demand for various types of other types of housing." The proposed development by Landmark 661 Ltd. would include a mix of commercial businesses, apartment buildings, townhouses and single-family homes. It would happen in five phases, beginning with six, four-storey apartment buildings with 427 residential units and commercial businesses on the ground floors. Grant is impressed that the development is being designed to fit into the existing neighbourhood with the single-family homes on the part of the 22.8-hectare site adjacent to existing single-family homes along Wedgewood Drive. The townhouse units and 16 four-storey apartment buildings, seven of which would have ground-floor commercial spaces, would face the Campbell Drive-Millennium Drive area overlooking a Kent Building Supplies store and the Atlantic Superstore mall area. "The whole thing is beautifully designed," Grant said. "The apartment buildings are organized into four quadrants. Each has four apartment buildings and each is organized around a central courtyard and green space. "It will have a lighted landscaped main street with shops and restaurants … this will provide what planners like to call the complete neighborhood or the complete community. It's mixed-use. It's walkable, family-oriented, with a variety of housing, courtyards, trail system and green space incorporated." 'We need more walkable streets in Rothesay' Kamkar said the community needs more neighbourhoods like this. "We don't just design homes. Our design team wants to make a community — a village-style place where people have everything they want," Kamkar said. "We need more walkable streets in Rothesay like there are in places like uptown Saint John, with a coffee shop, restaurant, bar and hair salon." The large wooded plot of land doesn't need to be rezoned, but council will need to vote on whether to approve a development agreement. The next council meeting is Aug. 11.

Walmart Stock Has Been Stuck Since April. Why J.P. Morgan Sees 35% Upside.
Walmart Stock Has Been Stuck Since April. Why J.P. Morgan Sees 35% Upside.

Yahoo

time2 hours ago

  • Yahoo

Walmart Stock Has Been Stuck Since April. Why J.P. Morgan Sees 35% Upside.

Walmart stock has been in a rut since April. The retailer may be poised for big gains over the next 18 months, thanks to gains with wealthier shoppers and a savvy tariff strategy, according to J.P. Morgan. Walmart's fate is closely tied to the mood of U.S. consumers. Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store